A *bank* not using DNSSEC?? Glad I don't have any money there.
On Sun, 16 Jun 2019 14:00:36 +0100 (BST) "G.W. Haywood via bind-users" <bind-users@lists.isc.org> wrote: > Hi there, > > On Sun, 16 Jun 2019, Mark Andrews wrote: > > > The servers for this zone are broken, they do not respond to > > queries with DNS COOKIE options present. You can add server > > options to named.conf to work around this while Barclays fix their > > servers / firewalls. Modern recursive servers are no longer > > working around broken servers that do not respond to queries. See > > DNS flag day. It looks like Barclays ignored the messages. > > They have some history of ignoring messages: > > $ whois barclays.com | grep DNSSEC > DNSSEC: unsigned > _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
